Getting token fails due to invalid authorization code

I published my Zoom app on the Marketplace.
While monitoring the log, I found an error log that failed to getting an access token.

Below is the relevant part of the log.

400 Bad Request:
“reason”: “Invalid authorization code”
“error”": “invalid_grant”

I get the access token with the following URL.
https://zoom.us/oauth/token?code=[Acquired authorization code]&grant_type=authorization_code&redirect_uri=[Our redirect uri]

We don’t use PKCE.

When I install the app from the marketplace it was successful.
Some of my customers seem to have this problem.

What could be causing the access token acquisition to fail?
Please let me know if there is an investigation method.

Thank you in advance for your cooperation.

The authorization code is a one time use code only. if you use it again, it will give you an error.

You need to have the user authorize the app again to get a new authorization code, or if you have a refresh token, then you need to use the refresh token to get a new access token

Thank you for your reply.

I don’t think the normal marketplace installation process will require you to authenticate twice.
Does it happen if you copy the URL and enter it through the browser?

My apologies, I should have been more clear, by authorizing again, I meant, the user clicking on the publishable URL. Every time a user clicks on the publishable URL, it will be a new authorization code

I understood that every time a user clicks on the publishable URL it will be a new authorization code.
Do you have any ideas what could be causing the error I mentioned?
Please let me know if there is an appropriate investigation method.

How often does this happen? While we do not have any specific mechanisms in place, the only things I can think of are

  1. The authorization code that you are using in your request is incorrect or
  2. It has been used before.

If this happens, then you should prompt your user to authorize the integration again.

This only happened once.

Unless you intentionally modify the authorization code, this problem does not seem to occur.
I don’t think it’s a big problem because it doesn’t occur continuously.

Thank you for your cooperation.